fix data leakage and copying.  Authview handles most auth errors gracefully now, though without user feedback